$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: o3p/pEAjL+4zSzEARw+5NO8bhap+h4/aauzGXs94W/A= Subject key identifier: C1:AB:D9:67:E5:AE:75:5C:48:58:44:DF:CF:82:3E:E2:2B:BB:2D:A4 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 520A38A34BDE6359C8E30816A11396A956D6245B Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 07 Jul 2023 08:01:38 +0000 ROA not before: Fri 07 Jul 2023 07:56:38 +0000 ROA not after: Fri 05 Jul 2024 08:01:38 +0000 asID: 58552 IP address blocks: 2404:fd00:face::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 11:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0a:38:a3:4b:de:63:59:c8:e3:08:16:a1:13:96:a9:56:d6:24:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 7 07:56:38 2023 GMT Not After : Jul 5 08:01:38 2024 GMT Subject: CN=C1ABD967E5AE755C485844DFCF823EE22BBB2DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:00:0b:1a:22:96:b2:2f:58:8b:ba:bf:cf:cb: 28:6c:eb:50:7c:d8:22:8b:96:c6:30:2d:02:97:d9: 9c:6b:8b:4b:20:ed:76:38:88:00:45:ad:8f:0b:bc: 51:72:08:dd:df:52:f2:09:34:7d:83:f0:15:26:0f: f3:8f:fc:73:07:a7:e5:67:46:0d:39:c9:84:c5:b9: ef:6e:1e:29:16:a9:00:36:01:af:72:0b:21:4c:64: 82:b2:3f:40:79:87:60:30:c0:9d:d6:1d:69:f7:aa: 45:db:56:0f:ec:03:cd:60:ed:c5:8f:d6:7c:d7:51: c6:89:c2:55:20:2b:f5:e8:7d:a6:a7:cb:c9:07:80: fb:c6:2b:19:88:b4:62:64:a2:e1:3e:cf:17:83:86: 2a:58:bd:24:08:c2:3b:a9:c3:78:ab:02:d8:a7:bd: ba:4b:86:92:40:0e:b0:bd:9b:ec:64:43:03:7f:36: fe:ed:a8:e7:28:cd:51:69:77:33:45:62:18:1e:51: ed:5c:38:08:f8:1b:4f:83:fa:43:71:2c:8b:2a:96: 3f:c0:58:40:c5:df:fe:59:66:7a:5b:32:5a:a0:47: 35:5a:41:0b:fc:dc:1c:1d:bd:c8:d7:b6:f5:ff:5d: 23:6b:78:20:e9:24:d6:b5:2a:13:90:42:df:68:86: 0c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AB:D9:67:E5:AE:75:5C:48:58:44:DF:CF:82:3E:E2:2B:BB:2D:A4 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:face::/48 Signature Algorithm: sha256WithRSAEncryption 49:8f:a0:84:a2:2f:7f:8d:12:12:a1:ea:3a:32:38:e1:ce:46: ce:27:26:d8:69:c3:f7:9f:06:be:d7:6e:0b:a5:33:5c:54:5d: ae:90:9f:14:89:5b:dd:a4:95:aa:cf:4a:db:6e:56:8e:f9:22: 31:32:7d:be:e0:ed:5a:89:91:e2:83:5a:c0:1e:b2:fa:38:7b: ec:cf:5c:ee:10:84:98:d4:28:76:6e:7b:d0:2d:24:42:76:7d: 24:d6:c8:f5:e3:ff:7e:2f:5c:ed:ff:23:8f:f6:06:d8:7a:06: 54:b3:9f:69:70:82:c2:d0:b1:7c:30:e9:42:b3:cf:5d:fa:3d: c3:a6:e8:85:42:71:83:9d:09:52:42:af:cd:a9:21:cc:88:5a: 3a:c2:df:ed:29:33:d7:6c:34:7f:50:a7:68:15:cf:3f:c7:8f: 01:36:cc:d8:cf:1d:cf:b4:0e:7f:b8:b0:ab:18:59:ee:da:fa: 0c:86:0f:b4:af:35:c5:a3:d4:e8:5b:4f:f7:e8:3b:1c:46:8f: 21:09:b6:c7:98:e5:ec:f0:46:34:05:71:dd:0d:fd:ce:da:53: 42:5c:ce:11:ea:b6:3d:51:cb:37:2f:cf:c8:e5:4b:31:5d:c9: 84:48:2b:bf:5c:40:3a:1c:91:61:6b:ae:b5:81:cd:93:ab:da: ab:df:97:e3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUgo4o0veY1nI4wgWoROWqVbWJFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yMzA3MDcwNzU2MzhaFw0yNDA3MDUwODAxMzhaMDMxMTAvBgNV BAMTKEMxQUJEOTY3RTVBRTc1NUM0ODU4NDRERkNGODIzRUUyMkJCQjJEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtAAsaIpayL1iLur/Pyyhs61B8 2CKLlsYwLQKX2Zxri0sg7XY4iABFrY8LvFFyCN3fUvIJNH2D8BUmD/OP/HMHp+Vn Rg05yYTFue9uHikWqQA2Aa9yCyFMZIKyP0B5h2AwwJ3WHWn3qkXbVg/sA81g7cWP 1nzXUcaJwlUgK/Xofaany8kHgPvGKxmItGJkouE+zxeDhipYvSQIwjupw3irAtin vbpLhpJADrC9m+xkQwN/Nv7tqOcozVFpdzNFYhgeUe1cOAj4G0+D+kNxLIsqlj/A WEDF3/5ZZnpbMlqgRzVaQQv83BwdvcjXtvX/XSNreCDpJNa1KhOQQt9ohgxNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUwavZZ+WudVxIWETfz4I+4iu7LaQwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhNjY2MTYzNjUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM4MzUzNTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAT9 APrOMA0GCSqGSIb3DQEBCwUAA4IBAQBJj6CEoi9/jRISoeo6MjjhzkbOJybYacP3 nwa+124LpTNcVF2ukJ8UiVvdpJWqz0rbblaO+SIxMn2+4O1aiZHig1rAHrL6OHvs z1zuEISY1Ch2bnvQLSRCdn0k1sj14/9+L1zt/yOP9gbYegZUs59pcILC0LF8MOlC s89d+j3DpuiFQnGDnQlSQq/NqSHMiFo6wt/tKTPXbDR/UKdoFc8/x48BNszYzx3P tA5/uLCrGFnu2voMhg+0rzXFo9ToW0/36DscRo8hCbbHmOXs8EY0BXHdDf3O2lNC XM4R6rY9Ucs3L8/I5UsxXcmESCu/XEA6HJFha661gc2Tq9qr35fj -----END CERTIFICATE-----Generated at Thu May 2 10:16:53 2024 by rpki-client on console-ams.rpki-client.org